Classification based automated instance management

ABSTRACT

Systems, apparatuses, and methods for classification based automated instance management are disclosed. Classification based automated instance management may include automatically commissioning an application instance based on a plurality of classification metrics, and automatically monitoring the application instance based on the plurality of classification metrics. Automatically monitoring the application instance may include identifying a plurality of instance monitoring policies associated with the application instance based on the plurality of classification metrics. Automatically monitoring the application instance may include automatically suspending the application instance plurality of instance monitoring policies and automatically decommissioning the application based on the plurality of instance monitoring policies.

CROSS REFERENCE TO RELATED APPLICATIONS

The present application claims the benefit of U.S. ProvisionalApplication No. 62/098,470 filed Dec. 31, 2014, entitled,“Classification Based Automated Instance Management,” hereinincorporated by reference.

TECHNICAL FIELD

The present disclosure relates in general to techniques and devices formanaging cloud based computing system instances.

BACKGROUND

Cloud computing relates to the sharing of computing resources that aretypically accessed via the Internet. A cloud computing infrastructuretypically includes a large number of servers that are configured toexecute various programs, such as application servers, web servers,and/or database servers. Accordingly, classification based automatedinstance management would be advantageous.

SUMMARY

One implementation of the disclosure is an apparatus for automaticallycommissioning and decommissioning a computer-instantiated applicationinstance comprising a processor configured to execute instructionsstored in a memory to provide a request at a communication input tocommission an application instance, identify the request to commissionthe application instance, the request indicating a classification metricfor the application instance, automatically commission the applicationinstance based on the classification metric, utilize data received atthe communication input to automatically monitor the applicationinstance based on the classification metric, and automaticallydecommissioning the application based on the classification metric.

Another implementation of the disclosure is an apparatus forclassification based automated instance management, comprising aprocessor configured to execute instructions stored in a memory toidentify a request to commission an application instance, the requestindicating a plurality of classification metrics for the applicationinstance, automatically commission the application instance based on theplurality of classification metrics, and automatically monitor theapplication instance based on the plurality of classification metrics byidentifying a plurality of instance monitoring policies associated withthe application instance based on the plurality of classificationmetrics; and identifying an approved extension for the applicationinstance based on the plurality of instance monitoring policies, whereinmonitoring the application instance comprises on a condition that anapproved extension is identified, extending the application instancebased on the plurality of instance monitoring policies, and on acondition that an approved extension is unidentified, determiningwhether the application instance is in an active state or a suspendedstate based, wherein monitoring the application instance comprises on acondition that the application instance is in an active state,identifying an expiration date for the application instance based on theplurality of instance monitoring policies, wherein monitoring theapplication instance comprises on a condition that the expiration dateis identified, identifying an expiration milestone for the applicationinstance based on the plurality of instance monitoring policies, whereinmonitoring the application instance comprises on a condition that theexpiration milestone is identified, generating and sending an expirationmilestone notification for the application instance based on theplurality of instance monitoring policies and the identified expirationmilestone; and on a condition that the expiration milestone isunidentified, monitoring the application instance comprises determiningwhether a duration for the application instance has expired based on theplurality of instance monitoring policies, and on a condition that theduration for the application instance has expired, suspending theapplication instance based on the plurality of instance monitoringpolicies, and on a condition that the expiration date is unidentified,generating the expiration date for the application instance based on theplurality of instance monitoring policies, and sending an instanceexpiration notification indicating that the instance will be suspendedafter the expiration date; and on a condition that the applicationinstance is in a suspended state, determining whether a suspensionperiod for the application instance has expired based on the pluralityof instance monitoring policies, and on a condition that the suspensionperiod for the application instance has expired, decommissioning theapplication instance based on the plurality of instance monitoringpolicies.

Another implementation of the disclosure is a computer-implementedmethod for automatically commissioning and decommissioning anapplication instance comprising receiving at a communication input of aprocessor a request to commission an application instance on a computer,identifying, by the processor, the request to commission the applicationinstance, the request structured to include a classification metric forthe application instance, automatically commissioning, by the processor,the application instance based on the classification metric,automatically monitoring by the processor, utilizing data received atthe communication input, the application instance running on thecomputer based on the classification metric, and automaticallydecommissioning by the processor the application based on theclassification metric.

BRIEF DESCRIPTION OF THE DRAWINGS

The description herein makes reference to the accompanying drawingswherein like reference numerals refer to like parts throughout theseveral views.

FIG. 1 is a block diagram of a networked distributed or cloud computingsystem in which the teachings herein may be implemented.

FIG. 2 is a block diagram of an example internal configuration of acomputing device, such as a computing device of the computing system asshown in FIG. 1.

FIG. 3A is a block diagram illustrating primary components of theclassification based automated instance management system in accordancewith this disclosure.

FIG. 3B is a flowchart illustrating an example of classification basedautomated instance management in accordance with this disclosure.

FIG. 4 is a flowchart illustrating an example of instance commissioningin accordance with this disclosure.

FIG. 5 is a flowchart illustrating an example of automated instancemonitoring in accordance with this disclosure.

FIGS. 6A and 6B together constitute a flowchart illustrating an exampleof automated instance lifecycle monitoring and management in accordancewith this disclosure.

FIG. 7 is a flow chart illustrating an example of automated instancedecommissioning in accordance with this disclosure.

DETAILED DESCRIPTION

An application instance, such as a web site or service, in a cloudcomputing system may be instantiated on one or more physical devices,one or more virtual device, or a combination of physical and virtualdevices. For example, an application instance may include a web serverand a database server dedicated to the application and executing on avirtual machine, which may be hosted on a physical server. In anotherexample, multiple physical servers may be dedicated to an applicationinstance. Each active instance may utilize various cloud computingsystem resources, such as processors, or processor cycles, random accessmemory (RAM), storage or disk space, network address space, networkcommunication bandwidth, and the like. The operational expectations,such as response time, availability, maximum concurrent use, and thelike, for each instance may vary from instance to instance, and may besubject to contractual obligations, such as a service level agreement(SGA). Managing instances may utilize significant human resources.

Instance management may include monitoring and controlling instance useand lifecycle, which may include commissioning or provisioning aninstance, maintaining or monitoring an instance, and decommissioning aninstance and reclaiming associated resources. However, existing instancemanagement systems may not efficiently and automatically manageapplication instances, may inefficiently allocate cloud computing systemresources, may inefficiently utilize human resources, and may notefficiently comply with operation expectations.

Computing resources of cloud computing infrastructure may be allocated,for example, using a multi-tenant or a single-tenant architecture. Undera multi-tenant architecture, installations or instantiations ofapplication, database, and/or other software application servers may beshared amongst multiple customers. For example, a single web server(e.g., a unitary Apache installation), application server (e.g., unitaryJava Virtual Machine) and/or a single database server catalog (e.g., aunitary MySQL catalog) may handle requests from multiple customers. In amulti-tenant architecture, data or applications used by variouscustomers can be commingled or shared. In an implementation of thisarchitecture, the application and/or database server software candistinguish between and segregate data and other information of thevarious customers using the system. For example, database recordsbelonging to a particular customer may be identified using a customer_idfield in a database table holding records for numerous customers.

Under a single-tenant infrastructure, separate web servers, applicationservers, and/or database servers are created for each customer. In otherwords, each customer will access its dedicated web server(s), will haveits transactions processed using its dedicated application server(s),and will have its data stored in its dedicated database server(s) and orcatalog(s). In a single-tenant architecture, physical hardware serversmay be shared such that multiple installations or instantiations of web,application, and/or database servers may be installed on the samephysical server. Each installation may be allocated a certain portion ofthe physical server resources, such as RAM, storage, and CPU cycles.

In an example implementation, a customer instance is composed of fourweb server instances, four application server instances, and twodatabase server instances. As previously described each of these serverinstances may be located on different physical servers and each of theseserver instances may share resources of the different physical serverswith a number of other server instances associated with other customerinstances. The web, application, and database servers of the customerinstance can be allocated to two different datacenters to facilitatehigh availability of the applications and data provided by the servers.There may be a primary pair of web servers and application servers in afirst datacenter and a backup pair of web servers and applicationservers in a second datacenter. There may be a primary database serverin the first datacenter and a second database server in the seconddatacenter. The primary database server can replicate data to thesecondary database server. The cloud computing infrastructure can beconfigured to direct traffic to the primary pair of web servers whichcan be configured to utilize the primary pair of application servers andprimary database server respectively. In a failure scenario, thesecondary servers may be converted to primary servers.

The application servers can include a platform application, such as onewritten in Java, for example, that provides generic platformfunctionality for accessing the database servers, integrating withexternal applications, and rendering web pages and other content to betransmitted to clients. The generic platform functionality may beconfigured with metadata stored in the database server. In other words,the operation of the platform on the application server may becustomized by certain end-users of the platform without requiring theJava code of the platform application to be changed. The database serverinstances can be configured with a database configuration and schema tofacilitate the operation of the platform. For example, the databaseserver instance can be configured with various tables for storingmetadata about applications, tables/fields, menus, forms, businessrules, scripts, and custom UI elements that are used to customize theappearance and operation of the customer instance. In someimplementations, the application servers can include web serverfunctionality and the web servers can be omitted.

In an alternative implementation, a customer instance may include onlytwo application servers and one database server. In a given cloudinfrastructure system, different implementations of customer instancesmay be used for different customer instances at the same time. Otherconfigurations and implementations of customer instances may also beused.

The proper allocation of computing resources of a physical server to aninstance of a particular software server, such as a database serverinstance, can be important to the efficient and effective functioning ofthe cloud infrastructure. If too few resources are allocated,performance of the services provided to the customer using the databaseserver may be degraded. If too many resources are allocated, computingresources may be wasted as the extra allocated resources may notmeaningfully increase the performance of the services provided to thecustomer. Repeated over allocation of computing resources may requirethat additional server hardware be purchased to satisfy the overallocation, resulting in a greater than necessary cost for providing thecloud infrastructure. In current systems, the amount of possible RAM maybe constrained per physical server and the utilization of RAM may berelatively higher than other available computing resources, such asprocessing cycles (e.g., CPU) and storage (e.g., solid state andmagnetic hard disks). Thus, it may be advantageous to more preciselyallocate the amount of RAM to each database server instance due to therelative scarcity of RAM resources.

The amount of memory used by a database server may be fixed once thedatabase server is provisioned or created. In this case, in order tochange an amount of memory allocated to a database server, a newdatabase server instance may be created and the contents of the existingdatabase server transferred to the new database server instance. Thisprocess may be controlled by a database instance move system which maybe provided with an identifier of a database server instance and adesired size for the database server instance in order to move theinstance. In certain implementations, the move system can identify aserver that the database server instance can be moved to based oncertain criteria, such as available free resources, location, or otherknown information. A customer notification can be provided and theprovisioning of the new database server instance with the desired sizecan be performed automatically followed by the copying of databaseserver data to the new database server instance, switching configurationsettings so that users are directed to the new database server instanceand retiring the original database server after a pre-determined time(e.g., 2 days) to reclaim system resources, such as RAM, allocated tothe original database server. In an alternative implementation, theamount of memory used by a database server instance can be adjusted incertain circumstances. For example, the amount of memory may beincreased only to the extent that additional memory is available on thephysical server for allocation.

A database instance can be allocated RAM and storage, such asnon-volatile storage, which can be accessed and processed using a CPU.The RAM can include a buffer pool, key cache, query cache, and othermemory allocations. The buffer pool can be used to cache table and indexdatabase pages from the storage. Query cache can store some or allprevious queries to the database to optimize processing of later similaror same queries. Key cache can be used to store portions of databasetables that may be accessed more often than other portions. Each ofbuffer pool, query cache, and key cache may be allocated a certainportion of the RAM. The size of each allocation may differ, for example,the buffer pool may be allocated more RAM than query cache and keycache. Other allocations can include other buffers or data structuresused in the operation of the database instance. The buffers and datastructures used in an implementation of a database instance may vary andmay include less or additional buffers than described here.

The storage an include storage of table data including tables. Thenumber of tables can vary and can number in the thousands, for example.The storage can also include other storage for storing other data usedby the database instance, for example, configuration data, index data,and other information used in the operation of the database instance.

Classification based automated instance management may reduce instancemanagement human resource utilization, may improve the allocation,utilization, and reclamation of cloud computing system resources, andmay improve compliance with operation expectations, by performinginstance management automatically based on instance classificationinformation.

FIG. 1 is a block diagram of a distributed (e.g., client-server,networked, or cloud) computing system 100. Use of the phrase “cloudcomputing system” herein is a proxy for any form of a distributedcomputing system, and this phrase is used simply for ease of reference.Cloud computing system 100 can have any number of customers, includingcustomer 110. Each customer 110 may have clients, such as clients 112.Each of clients 112 can be in the form of a computing system includingmultiple computing devices, or in the form of a single computing device,for example, a mobile phone, a tablet computer, a laptop computer, anotebook computer, a desktop computer, and the like. Customer 110 andclients 112 are examples only, and a cloud computing system may have adifferent number of customers or clients or may have a differentconfiguration of customers or clients. For example, there may behundreds or thousands of customers and each customer may have any numberof clients.

Cloud computing system 100 can include any number of datacenters,including datacenter 120. Each datacenter 120 may have servers, such asservers 122. Each datacenter 120 may represent a facility in a differentgeographic location where servers are located. Each of servers 122 canbe in the form of a computing system including multiple computingdevices, or in the form of a single computing device, for example, adesktop computer, a server computer and the like. The datacenter 120 andservers 122 are examples only, and a cloud computing system may have adifferent number of datacenters and servers or may have a differentconfiguration of datacenters and servers. For example, there may be tensof data centers and each data center may have hundreds or any number ofservers.

Clients 112 and servers 122 may be configured to connect to network 130.The clients for a particular customer may connect to network 130 via acommon connection point 116 or different connection points, e.g. awireless connection point 118 and a wired connection point 119. Anycombination of common or different connections points may be present,and any combination of wired and wireless connection points may bepresent as well. Network 130 can be, for example, the Internet. Network130 can also be or include a local area network (LAN), wide area network(WAN), virtual private network (VPN), or any other means of transferringdata between any of clients 112 and servers 122. Network 130, datacenter120 and/or blocks not shown may include network hardware such asrouters, switches, load balancers and/or other network devices.

Other implementations of the cloud computing system 100 are alsopossible. For example, devices other than the clients and servers shownmay be included in system 100. In an implementation, one or moreadditional servers may operate as a cloud infrastructure control, fromwhich servers and/or clients of the cloud infrastructure are monitored,controlled and/or configured. For example, some or all of the techniquesdescribed herein may operate on said cloud infrastructure controlservers. Alternatively, or in addition, some or all of the techniquesdescribed herein may operate on servers such as servers 122.

FIG. 2 is a block diagram of an example internal configuration of acomputing device 200, such as a client 112 or server device 122 of thecomputing system 100 as shown in FIG. 1, including an infrastructurecontrol server, of a computing system. As previously described, clients112 or servers 122 may take the form of a computing system includingmultiple computing units, or in the form of a single computing unit, forexample, a mobile phone, a tablet computer, a laptop computer, anotebook computer, a desktop computer, a server computer and the like.

The computing device 200 can include a number of components, asillustrated in FIG. 2. CPU (or processor) 202 can be a centralprocessing unit, such as a microprocessor, and can include single ormultiple processors, each having single or multiple processing cores.Alternatively, CPU 202 can include another type of device, or multipledevices, capable of manipulating or processing information now-existingor hereafter developed. When multiple processing devices are present,they may be interconnected in any manner, including hardwired ornetworked, including wirelessly networked. Thus, the operations of CPU202 can be distributed across multiple machines that can be coupleddirectly or across a local area or other network The CPU 202 can be ageneral purpose processor or a special purpose processor.

Random Access Memory (RAM 204) can be any suitable non-permanent storagedevice that is used as memory. RAM 204 can include executableinstructions and data for immediate access by CPU 202. RAM 204 typicallycomprises one or more DRAM modules such as DDR SDRAM. Alternatively, RAM204 can include another type of device, or multiple devices, capable ofstoring data for processing by CPU 202 now-existing or hereafterdeveloped. CPU 202 can access and manipulate data in RAM 204 via bus212. The CPU 202 may utilize a cache 220 as a form of localized fastmemory for operating on data and instructions.

Storage 206 can be in the form of read only memory (ROM), a disk drive,a solid state drive, flash memory, Phase-Change Memory (PCM), or anyform of non-volatile memory designed to maintain data for some durationof time, and preferably in the event of a power loss. Storage 206 caninclude executable instructions 206A and application files/data 206Balong with other data. The executable instructions 206A can include, forexample, an operating system and one or more application programs forloading in whole or part into RAM 204 (with RAM-based executableinstructions 204A and application files/data 204B) and to be executed byCPU 202. The executable instructions 206A may be organized intoprogrammable modules or algorithms, functional programs, codes, and codesegments designed to perform various functions described herein. Theoperating system can be, for example, a Microsoft Windows®, Mac OS X®,or Linux®, or operating system, or can be an operating system for asmall device, such as a smart phone or tablet device, or a large device,such as a mainframe computer. The application program can include, forexample, a web browser, web server and/or database server. Applicationfiles 206B can, for example, include user files, database catalogs andconfiguration information. In an implementation, storage 206 includesinstructions to perform the discovery techniques described herein.Storage 206 may comprise one or multiple devices and may utilize one ormore types of storage, such as solid state or magnetic.

The computing device 200 can also include one or more input/outputdevices, such as a network communication unit 208 and interface 230 thatmay have a wired communication component or a wireless communicationscomponent 290, which can be coupled to CPU 202 via bus 212. The networkcommunication unit 208 can utilized any of a variety of standardizednetwork protocols, such as Ethernet, TCP/IP, to name a few of manyprotocols, to effect communications between devices. The interface 230can comprise one or more transceiver(s) that utilize the Ethernet, powerline communication (PLC), WiFi, infrared, GPRS/GSM, CDMA, etc.

A user interface 210 can include a display, positional input device(such as a mouse, touchpad, touchscreen, or the like), keyboard, orother forms of user input and output devices. The user interface 210 canbe coupled to the processor 202 via the bus 212. Other output devicesthat permit a user to program or otherwise use the client or server canbe provided in addition to or as an alternative to display 210. When theoutput device is or includes a display, the display can be implementedin various ways, including by a liquid crystal display (LCD) or acathode-ray tube (CRT) or light emitting diode (LED) display, such as anOLED display.

Other implementations of the internal configuration or architecture ofclients and servers 200 are also possible. For example, servers may omitdisplay 210. RAM 204 or storage 206 can be distributed across multiplemachines such as network-based memory or memory in multiple machinesperforming the operations of clients or servers. Although depicted hereas a single bus, bus 212 can be composed of multiple buses, that may beconnected to each other through various bridges, controllers, and/oradapters. Computing devices 200 may contain any number of sensors anddetectors that monitor the device 200 itself or the environment aroundthe device 200, or it may contain a location identification unit 260,such as a GPS or other type of location device. The computing device 200may also contain a power source 270, such as a battery, so that the unitcan operate in a self-contained manner. These may communicate with theCPU/processor 202 via the bus 212.

FIG. 3A is a block diagram illustrating an example of the basiccomponents of a classification based automated instance managementsystem in accordance with this disclosure. Application instances may beclassified based on one or more ontological classification metrics,which may be hieratically organized. Information representing aspects ofan instance, which may include classification metrics, may be stored asrecords 360 in a classification based automated instance managementdatabase or configuration file 350, which may include a configurationmanagement database (CMDB) 370. The classification based automatedinstance management data may define classification metrics, and maydescribe relationships, such as hierarchical relationships, between theclassification metrics. For example, the classification based automatedinstance management data may include a first record defining a firstclassification metric, a second record defining a second classificationmetric, and a third record indicating that the sub-hierarchy of thefirst classification metric includes the second classification metric.

Application instances may be classified as an internal instance or anexternal instance 362. An internal instance may be an instancecommissioned by or for the use of an owner or operator of theclassification based automated instance management system. For example,an internal instance may be associated with a domain associated with theowner or operator of the classification based automated instancemanagement system. An external instance may be an instance commissionedby or for the use of a defined client or customer. For example, anexternal instance may be associated with a domain associated with acustomer or client of the owner or operator of the classification basedautomated instance management system. Application instances may beclassified based on environment 364, such as a production environment, asub-production environment, or a demonstration environment. Applicationinstances may be classified based on type, purpose, or sub-category 366,such as training, development, marketing, or sales. Applicationinstances may be classified based on customer visibility 368, which mayindicate whether an instance is client facing or accessible. Theseclassifications are by way of example only.

Classification based automated instance management may include using oneor more policies or rules 380 to automatically manage applicationinstances. For example, the classification based automated instancemanagement system may include information indicating automation policieswhich may be stored as records in the classification based automatedinstance management database. In some implementations, one or morepolicies may represent an agreement, such as a service level agreement(SLA). Classification based automated instance management policies maybe associated with one or more classification metrics and theclassification based automated instance management data may includerecords describing the associations between classification metrics andthe policies. For example, an instance may be associated with a customeraccount, and the classification based automated instance managementsystem may include records, or combinations of records, representingpolicies corresponding to the customer account. In some implementations,classification based automated instance management policies may beassociated with a user, a user role, a user group, or a combinationthereof.

FIG. 3B is a flowchart illustrating an example of classification basedautomated instance management. In some implementations, classificationbased automated instance management may include generating a request tocommission an instance at 300, commissioning the instance at 310,monitoring the instance at 320, decommissioning the instance at 330, ora combination thereof.

A request to commission an instance may be generated at 300. Forexample, a request to commission an instance may be generated based onuser input via a user interface. In some implementations, a request tocommission an instance may be generated in response to user inputselecting parameters for the instance and submitting the request via auser interface, such as a web page. In some implementations, the userinterface may have an ontological association. For example, an internalinstance may be commissioned using an internal instance requestinterface, and an external instance may be commissioned using anexternal instance request interface.

A request to commission an instance may include parameters for theinstance, such as an ontology indicator, environment indicator, a typeindicator, a visibility indicator, an owner identifier, an assignmentgroup identifier, a name, a comment, a target datacenter, a targetaddress, such as a universal resource locator (URL), or any otherinformation relevant to managing the instance. An environment indicatormay indicate whether the request is for a production instance, asub-production instance, or a demonstration instance. A type orsub-category indicator may indicate a type associated with the instance.For example, a sub-category indicator may indicate that the instance isa training instance, a development instance, a marketing instance, asales instance, or any other purpose or use for the instance. Thecustomer facing indicator may indicate whether the instance will includeone or more components that may be directly available to an externalcustomer, such as a user interface accessible by the customer. An ownerindicator may identify a user, a user role, a group, or an organizationas an owner of the instance. For example, the request may be generatedin response to user input and the owner may be the user.

The instance may be commissioned at 310, as shown in FIG. 4. Forexample, commissioning an instance may include identifying policies,confirming approval, provisioning cloud computing system resources,generating and storing classification based automated instancemanagement system information representing the instance, or acombination thereof.

An instance may be automatically monitored at 320, as shown in FIG. 5.For example, automatically monitoring an instance may include automatedcustomer support activities, automated resource monitoring, automatedbackup, automated instance lifecycle management, or a combinationthereof.

An instance may be automatically decommissioned at 330, as shown in FIG.7. For example, automatically decommissioning an instance may includeidentifying and evaluating policies, archiving the instance, reclaimingresources, generating and sending notifications, or a combinationthereof.

FIG. 4 is a flowchart illustrating an example of instance commissioning310 in accordance with this disclosure. Commissioning an instance may beperformed in response to generating or receiving a request to commissionan instance and may include identifying policies at 400, confirmingapproval at 410, provisioning cloud computing system resources at 420,generating and storing classification based automated instancemanagement system information representing the instance at 430,generating and sending notifications at 440, or a combination thereof.

Classification based automated instance management policies may beautomatically identified at 400. For example, one or more classificationbased automated instance management policies may be identified byexamining the CMDB based on the parameters indicated in the request.

Identifying policies at 400 may include determining resource allocationsfor the instance. Resource allocations may identify defined hardwareconfiguration parameters, defined software configuration parameters,defined system configuration parameters, defined data configurationparameters, or any other information that may be used to automaticallyconfigure an instance.

Resource allocations may identify processor attributes for an instance,such as a number, quantification, or count of processors, a type ofprocessor, a capability of a processor, or a portion of one or moreprocessors, such as a number of clock cycles per unit time. Resourceallocations may identify a defined processor. For example, a resourceallocation may identify a SKU representing a defined processor, or aninventory control identifier representing a defined processor.

Resource allocations may identify volatile memory, such as random accessmemory (RAM), attributes for an instance, such as a number,quantification, or amount of volatile memory space, a type of volatilememory, or a capability of volatile memory. Resource allocations mayidentify a defined memory unit. For example, a resource allocation mayidentify a SKU representing a defined memory unit, or an inventorycontrol identifier representing a defined memory unit.

Resource allocations may identify storage or disk space attributes foran instance, such as a number, quantification, or amount of disk space,a type of disk space, or a disk capability, such as read time, writetime, or redundancy. Resource allocations may identify a defined diskunit. For example, a resource allocation may identify a SKU representinga defined disk unit, or an inventory control identifier representing adefined disk unit.

Resource allocations may identify network attributes for an instance,such as a number, quantification, or amount of communication bandwidth,an address, address space, or domain, or a network capability, such asresponse time, availability, configuration, or the like. Resourceallocations may identify a defined network attribute, such as a definedURL.

Resource allocations may identify software for an instance, such as anoperating system type, version, or configuration, a web server type,version, or configuration, a database server type, version, orconfiguration. A resource allocation may identify a virtual machinetype, version, or configuration. A resource allocation may identify adefined host system. For example, resource allocations may identify avirtual machine and a physical server to host the virtual machine. Inanother example, resource allocations may identify a defined web serverto host a web component of the application instance and a defineddatabase server to host a database for the instance.

Resource allocations may be relative in nature. For example, a resourceallocation may indicate that an instance should be allocated toavailable hardware or racks that are older or not as capable (e.g., foran instance that is less critical, such as an employee instance) or thatan instance should be allocated to available hardware or racks that arenewer or more capable (e.g., for an instance that is critical, such as asales demonstration instance). For example, available resources can beranked by one or more criteria, such as processing power, memory,storage space, and/or age, and the resource allocation can indicate thatan instance should be assigned in order of the ranking or within acertain percentile of the ranking (e.g., to hardware in the 20thpercentile of processing power).

In some implementations, identifying policies at 400 may includeidentifying approval policies for the requested instance. For example,one or more approval policies may be identified by evaluating theclassification based automated instance management data based on theparameters indicated in the request. An approval policy may indicate anapproval required for commissioning the requested instance, and mayindicate one or more approval entities associated with the approval. Anapproval entity may be a user or a user role. For example, the approvalentity may be a user identifier for a user that is a manager orsupervisor of the user indicated as the owner of the instance. Inanother example, the owner may be a customer and the approval entitiesmay include internal users associated with the customer, such as anaccount representative, a manager of the account representative, and adirector of the manager. In some implementations, the classificationbased automated instance management data may include informationdescribing approval relationships between users or user roles.

Approval of the request may be automatically confirmed at 410 based onthe approval polices identified at 400. For example, confirming theapproval may include evaluating the classification based automatedinstance management data to identify a record indicating approval forthe request. In some implementations, an approval may be generatedautomatically or may be omitted. For example, a user may be identifiedas an approver for the request, and confirming the approval may includedetermining that automatic approval is defined for the user, or for auser role associated with the user. In some implementations, an approvalrecord associated with an approval entity for the instance may beunavailable, and commissioning the instance may be delayed. For example,the classification based automated instance management system mayperiodically determine whether the request is approved, or may determinewhether the request is approved in response to an event, such asreceiving or storing an approval record. In some implementations, arequest may be denied and commissioning the instance may be terminated.

Cloud computing system resources may be provisioned at 420 based on theresource allocations identified at 400. Provisioning cloud computingresources may include reserving resources, acquiring resources, creatingresources, distributing resources, configuring resources, deployingresources, or any other activities associated with providing resourcesfor an instance. For example, generating or provisioning an instance at420 may include installing software on a device, such as a server,configuring hardware or software, storing data, such as application dataand files, or a combination thereof. In some implementations,provisioning the instance at 420 may include creating a virtual machineon a server. In some implementations, provisioning the instance at 420may include generating and storing routing information for the instance.

Classification based automated instance management system informationrepresenting the instance may be automatically generated and stored at430. Generating and storing classification based automated instancemanagement information at 430 may include generating information, suchas records, representing the instance and storing the record in theclassification based automated instance management database orconfiguration file, which may include the CMDB.

Notifications regarding the instance may be automatically generated andsent at 440 based on the policies identified at 400. For example, anotification may be sent to the instance owner, an approver of therequest, the assignment group, or a combination thereof. In someimplementations, the classification based automated instance managementpolicies may indicate that an instance is configured to expireautomatically. For example, the classification based automated instancemanagement data may indicate a duration for the instance, which mayindicate a period, such as a number of days, from the date the instanceis commissioned, after which the instance will be automaticallydecommissioned. In another example, the classification based automatedinstance management data may indicate an expiration event for theinstance. For example, an instance associated with a user may beconfigured to automatically expire in response to a change of a statusof the user to inactive. In some implementations, the classificationbased automated instance management data may indicate a combination ofan expiration event and a duration. For example, an instance may beconfigured to automatically expire after 60 days of inactivity. Thenotification may indicate the duration for the instance, an expirationdate determined based on the duration, an expiration event, or acombination thereof.

FIG. 5 s is a flowchart illustrating an example of automated instancemonitoring 320 in accordance with this disclosure. Automated instancemonitoring may include identifying automated instance monitoringpolicies at 500, evaluating the policies at 510, performing one or moreautomated instance monitoring activities at 520, or a combinationthereof.

Automated instance monitoring 320 may include continuous monitoring,periodic monitoring, or a combination thereof. For example, theclassification based automated instance management system may includeone or more scheduled monitoring jobs, which may be scheduled to executeperiodically, such as daily. Continuous instance monitoring may includeperforming a defined activity in response to an event, a trigger, or acondition. Periodic instance monitoring may include periodicallyevaluating instances, such as each instance identified in theclassification based automated instance management data. In someimplementations, the classification based automated instance managementdata may indicate that an instance is decommissioned, and monitoring forthe instance may be limited to decommissioned instance monitoring, oromitted.

Automated instance monitoring policies may be identified at 500.Identifying automated instance monitoring policies may includeidentifying instances defined in the classification based automatedinstance management data and identifying classification based automatedinstance management policies for the instances. In some implementations,the automated monitoring activities for an instance may be determined byexamining the classification based automated instance management data toidentify policies associated with the instance. For example, theclassification based automated instance management system mayautomatically examine the classification based automated instancemanagement data to identify classification based automated instancemanagement policies for an instance.

The policies identified at 500 may be evaluated at 510. Evaluating thepolicies may include identifying one or more automated instancemonitoring activities, such as automated customer support activities,automated resource monitoring, automated backup, automated instancelifecycle management, or a combination thereof. Evaluating the policiesmay include determining whether to perform one or more of the identifiedactivities based on defined instance information, current instance stateinformation, and the identified policies.

One or more of the identified automated instance monitoring activitiesmay be performed at 520 based on the determination at 510. In someimplementations, classification based automated instance management mayinclude communicating with one or more external systems. For example,automated monitoring may include identifying a policy that indicates anexternal computing system for performing a defined instance managementactivity, and the classification based automated instance managementsystem may communicate with the external computing system to perform thedefined instance management activity.

In an example, the policies may indicate automated support for aninstance. The identified policies may identify reporting criteria, whichmay include a user or user role as a defined recipient for automatedsupport notifications, and classification based automated instancemanagement may include automatically generating and sending supportnotifications to the identified user based on the identified reportingcriteria.

In another example, the policies may indicate an amount or type ofresource monitoring for an instance. For example, classification basedautomated instance management policies may indicate a monitoringfrequency, may indicate components of an instance to monitor, mayindicate whether to monitor usage, may indicate whether to monitorresource availability and usage for the instance, or may indicate anyother type of instance monitoring, and classification based automatedinstance management may include automatically monitoring the instancebased on the identified policies.

In another example, the policies may indicate frequency, retentionperiod, size, or redundancy for backing up an instance, andclassification based automated instance management may includeautomatically backing up the instance based on the identified policies.

In another example, the policies may indicate parameters for performingautomated lifecycle monitoring and management, and classification basedautomated instance management may include automatically performingautomated lifecycle monitoring and management, as shown in FIGS. 6A and6B.

FIGS. 6A and 6B together constitute a flowchart illustrating an exampleof automated instance lifecycle monitoring and management in accordancewith this disclosure. Automated instance lifecycle monitoring andmanagement may include identifying an approved extension at 600,extending the instance at 610, determining whether an instance is activeat 620, identifying an expiration date for the instance at 630,determining recency of use at 640, determining whether an expirationmilestone is current at 650, determining whether the instance is expiredat 660, determining whether a suspension period is expired at 670, or acombination thereof.

An approved extension determination may be performed at 600. Althoughnot shown separately in FIGS. 6A-6B, determining whether an extension isapproved for the instance at 600 may include performing an extensionrequest procedure. An extension request procedure may include generatinga request to extend an instance, notifying an approval entity regardingthe request, recording information indicating whether the request isapproved, or a combination thereof. In some implementations, anextension request may be generated using an extension request interface.For example, an expiration notice may indicate a link to an extensionrequest interface or a user may attempt to access a suspended instanceand the user may access a placeholder instance, which may include a linkto the extension request interface, and the extension request may begenerated and submitted via the extension request interface.

The extension request procedure may include generating and submitting anextension request. An extension request may include an identifier forthe instance, a name of the instance, an owner of the instance, anassignment group associated with the instance, a current expiration datefor the instance, an extension justification, or a combination thereof.In response to generating and submitting the extension request, anextension approval procedure may be performed. The extension approvalprocedure may include storing information indicating whether theextension request is approved. In some implementations, the extensionapproval procedure may include determining whether an extension isavailable for the instance and may include automatically indicating thatthe extension request is denied in response to determining that thereare no available extensions for the instance. The extension approvalprocedure may include generating and sending an extension requestresponse notification indicating whether the request has been approvedor denied. Target recipients for the notification may be identifiedbased on the classification based automated instance management data.For example, the notification may be sent to the owner, the requestor,the assignment group, or a combination thereof, as indicated by theclassification based automated instance management data.

The approved extension determination at 600 may indicate that anextension request for the instance is approved, the instance may beextended at 610, and the system may continue to monitor the instance at320. Extending the instance at 610 may include updating an expirationdate for the instance based on the approved extension duration asindicated in the classification based automated instance managementdata.

In some implementations, an approved extension may be identified for asuspended instance at 600, and extending the instance at 610 may includeadding, modifying, or deleting one or more records, such as records in aclassification based automated instance management database, to indicatethat the instance is active. For example, the classification basedautomated instance management database may include records indicating astatus of the instance, and the status may be updated to “active” or“operational”. In some implementations, network address information maybe modified to indicate that the instance is active. Modifying thenetwork address may include adding, deleting, or modifying networkrouting, naming, or address translation records, such as domain namesystem (DNS) records. In some implementations, the IP address of thesuspended instance may be marked as active, or may be added to one ormore routing or IP address management tables or systems.

Extending a suspended instance at 610 may include generating and sendingan extension notification indicating that the instance has beenextended, and indicating an updated expiration date for the instance.Target recipients for the notification may be identified based on theclassification based automated instance management data. For example,the notification may be sent to the owner, the approvers, the assignmentgroup, or a combination thereof, as indicated by the classificationbased automated instance management data.

The approved extension determination at 600 may not identify a requestfor extension for the instance, may determine that any current requestsfor extension are denied, or may determine that there are no availableextensions for the instance, and a status of the instance may beidentified at 620, which may include determining whether the instance isactive, inactive, suspended, or decommissioned. For example, theclassification based automated instance management data may includeinformation indicating the status of the instance. In someimplementations, monitoring for a decommissioned instance may beomitted.

The status of the instance may be identified as active at 620, and anexpiration date may be identified at 630. Automated instance lifecyclemonitoring and management may include determining expiration informationfor an instance, such as an expiration period or duration, a number ofavailable extensions, an extension duration, or a combination thereof.For example, the expiration information may be determined by examiningdefined classification based automated instance management data, such asdata stored in a database table or a configuration file. Table 1 showsan example of defined classification based automated instance managementduration data.

TABLE 1 Defined Classification Based Automated Instance ManagementDuration Data Internal/ Extension External Type Duration ExtensionsDuration External Customer 90 Days 3 30 Days External Partner 90 Days 330 Days External Developer 90 Days 0 0 Internal Employee 90 Days 1 90Days Internal Training-Single 90 Days 1 90 Days Use Internal Development90 Days 1 90 Days Internal Marketing Ongoing N/A N/A Internal SalesOngoing N/A N/A Internal Solution Consultant Ongoing N/A N/A InternalInfo Doc Ongoing N/A N/A Internal RSA Ongoing N/A N/A Internal SupportOngoing N/A N/A Internal Training-Ongoing Ongoing N/A N/A InternalExpert Services Ongoing N/A N/A Internal QA Ongoing N/A N/A

In some implementations, identifying an expiration date at 630 mayinclude identifying an expiration type for the instance. An instanceexpiration type may be identified based on the instance environment, theinstance type, or a combination thereof, as shown in Table 1.

For example, the instance may be identified as having an expiration typeof “ongoing”, indicating an event based expiration type. An ongoinginstance may be an instance for which a defined duration is notspecified, is specified as ongoing, or is specified using a definedongoing duration value, such as zero. For example, Table 1 aboveindicates a “Training—Ongoing” instance type, for which a definedduration is specified as ongoing. Although not shown in Table 1, theclassification based automated instance management data may indicate aduration associate with an event based expiration type. For example, theclassification based automated instance management data may indicatethat an instance will expire a defined temporal threshold, such as 60days, after a defined event, such as a recency of use.

In another example, the instance may be identified as having a temporalexpiration type. A temporal expiration type instance may be an instancefor which a defined duration is specified. For example, Table 1 aboveindicates a “Training—Single Use” instance type that has a definedduration specified.

The expiration date determination at 630 may not identify a definedexpiration date for the instance and may determine that the instance isan ongoing instance, and the instance may be evaluated to determinerecency of use at 640. Determining recency of use at 640 may includedetermining a most recent use of the instance, such as a most recentrequest for information, such as a web page, from the instance, or amost recent successful login to the instance. For example, a system logassociated with the instance may be evaluated and a most recent requestto use or access the application instance may be identified. The mostrecent use may be evaluated to determine whether it is within a definedongoing instance recency threshold, such as 60 days. For example, adifference between the current date and the most recent use may be lessthan or equal to the defined ongoing instance recency threshold, and thesystem may continue to monitor the instance at 320. In another example,the difference between the current date and the most recent use may begreater than the defined ongoing instance recency threshold, an ongoinginstance expiration notification may be generated at 642, an expirationdate may be determined and stored at 644, and the system may continue tomonitor the instance at 320.

Generating an ongoing instance expiration notification at 642 mayinclude generating and sending a notification indicating automaticexpiration of the ongoing instance after a defined ongoing instanceautomatic expiration period, such as 15 days. The notification mayinclude instructions for requesting an extension of the ongoinginstance, which may include a link to an extension request form or page.In some implementations, generating the ongoing instance expirationnotification at 642 may be omitted if the difference between the currentdate and the most recent use is greater than one day larger than thedefined ongoing instance use duration threshold, or may be omitted inresponse to determining that an ongoing instance expiration notificationfor the current expiration period was previously sent. Target recipientsfor the notification may be identified based on the classification basedautomated instance management data. For example, the notification may besent to the owner, the approvers, the assignment group, or a combinationthereof, as indicated by the classification based automated instancemanagement data.

An expiration date for the instance may be determined and stored at 644.The expiration date may be the sum of the current date and the definedongoing instance automatic expiration period as indicated in the ongoinginstance expiration notification generated at 642. Storing theexpiration date may include generating and storing a record indicatingthe expiration date in the classification based automated instancemanagement data. In some implementations, generating the ongoinginstance expiration notification at 642 may include generating andstoring a record indicating the date the ongoing instance expirationnotification was sent in the classification based automated instancemanagement data, and storing the expiration date at 644 may be omitted.In some implementations, generating the ongoing instance expirationnotification at 642 may be performed on the date that the recency of usereaches the recency of use threshold, and storing the expiration date at644 may be omitted.

In some implementations, the expiration date determination at 630 mayindicate that the instance is an ongoing expiration type instance andmay indicate that an expiration date is identified for the instance. Forexample, the classification based automated instance management data mayinclude an indication of an expiration date for the ongoing instance. Inanother example, the expiration date determination at 630 may determinethat a defined ongoing instance recency threshold has been met or that anotification indicating that the defined ongoing instance recencythreshold has been met has been sent, and the expiration date may beidentified based on the date that the defined ongoing instance recencythreshold was met or the date the notification indicating that thedefined ongoing instance recency threshold has been met was sent.

The expiration date determination at 630 may indicate that the instanceis a temporal expiration type instance and the instance may be evaluatedto determine whether a defined expiration milestone has been reached at650. A defined expiration milestone may indicate a period, which may bea number of days, such as 1 day, 5 days, 15, or any other period,between a current date and an expiration date for the instance. Theexpiration date for the instance may be determined based on thecommissioning date for the instance, the duration for the instance, thenumber of approved extensions for the instance, and the duration foreach approved extension, which may be identified based on the instanceclassification metrics, as shown in Table 1 above. For example, theexpiration date may be the sum of the commissioning date for theinstance and the duration for the instance. In some implementations, theclassification based automated instance management data may defineexpiration milestones corresponding to the classification metrics.

The milestone determination at 650 may indicate that a definedexpiration milestone has been reached, and an instance expirationnotification may be generated at 652. Generating an instance expirationnotification at 652 may include generating and sending a notificationindicating automatic expiration of the instance after a periodcorresponding to the defined expiration milestone. For example, thedefined milestone may be a 5-day milestone, which may indicate that theinstance is 5 days from automatic expiration. The notification mayinclude an indication of the defined expiration milestone, and mayinclude instructions for requesting an extension of the instance, whichmay include a link to an extension request form or page. In someimplementations, generating the instance expiration notification at 652may be omitted if the difference between the current date and the mostrecent use is greater than one day larger than the defined expirationmilestone, or may be omitted in response to determining that an instanceexpiration notification for the defined expiration milestone waspreviously sent. Target recipients for the notification may beidentified based on the classification based automated instancemanagement data. For example, the notification may be sent to the owner,the approvers, the assignment group, or a combination thereof, asindicated by the classification based automated instance managementdata.

The milestone determination at 650 may indicate that the current datediffers from the defined expiration milestones for the instance, or maydetermine that a pending expiration milestone is not specified, and theinstance may be evaluated to determine whether the instance has expiredat 660. The expiration determination may indicate that the instance hasexpired, and the instance may be suspended at 662.

Suspending an instance at 662 may include maintaining the instanceconfiguration and operation, including instance monitoring at 320,except as described herein. Suspending an instance may include adding,modifying, or deleting one or more records, such as records inclassification based automated instance management database, to indicatethat the instance is suspended. For example, the classification basedautomated instance management database may include records indicating astatus of the instance, and the status may be updated to “suspended”. Insome implementations, network address information may be modified toindicate that the instance is suspended. Modifying the network addressmay include adding, deleting, or modifying network routing, naming, oraddress translation records, such as DNS records. In someimplementations, the IP address of the suspended instance may be markedas suspended, or may be deleted from one or more routing or IP addressmanagement tables or systems.

Suspending an instance may include generating and sending a suspendedinstance notification indicating that the instance has beenautomatically suspended, and indicating that the instance will bedecommissioned after a defined period, such as 14 days. The notificationmay include may include instructions for requesting restoration andextension of the instance, which may include a link to an extensionrequest form or page. Target recipients for the notification may beidentified based on the classification based automated instancemanagement data. For example, the notification may be sent to the owner,the approvers, the assignment group, or a combination thereof, asindicated by the classification based automated instance managementdata.

Suspending an instance may include providing a suspended instanceplaceholder. For example, a defined web server may host a suspendedinstances page, site, or application, and may be configured to presentinformation indicating that the instance has been suspended and toprovide information for extending the instance, such as a link to aninstance extension form, and the IP address of the suspended instancemay be replaced with the IP address of the suspended instances site inthe DNS records.

The status of the instance may be identified as suspended at 620, adetermination whether a suspension duration has expired may be performedat 670. The suspended period expired determination at 670 may determinewhether the instance has been suspended for a defined suspensionduration. The suspended period expired determination at 670 may indicatethat the instance has been suspended for less than the defined period,and the system may continue to monitor the instance at 320. Thesuspended period expired determination at 670 may indicate that theinstance has been suspended for the defined period, and the instance maybe retired or decommissioned, as shown in FIG. 7.

FIG. 7 is a flowchart illustrating an example of automated instancedecommissioning 330 in accordance with this disclosure. Automatedinstance decommissioning may include identifying automated instancedecommissioning policies at 700, evaluating the policies at 710,archiving the instance at 720, reclaiming resources at 730, generatingand sending a decommissioned instance notification at 740, or acombination thereof.

Automated instance decommissioning policies may be identified at 700.Identifying automated instance decommissioning policies may includeidentifying policies defined in the classification based automatedinstance management data based on instance classification metrics. Insome implementations, the automated monitoring activities for aninstance may be determined by examining the classification basedautomated instance management data to identify policies associated withthe instance.

The policies identified at 700 may be evaluated at 710. Evaluating thepolicies may include identifying one or more automated instancedecommissioning activities, such as automated archival, automatedresource reclamation, automated decommissioning notification, or acombination thereof. Evaluating the policies may include determiningwhether to perform one or more of the identified activities based ondefined instance information, current instance state information, andthe identified policies.

The instance may be automatically archived at 720. Automaticallyarchiving the instance may include generating a backup of the instancefor storage in an online backup system or at an offline backup facility.Automatically arching the instance may include adding, modifying, ordeleting one or more records, such as records in the classificationbased automated instance management database, to indicate that theinstance is retired or decommissioned. For example, the classificationbased automated instance management database may include recordsindicating a status of the instance, and the status may be updated to“retired”. In some implementations, network address information may bemodified to indicate that the instance is decommissioned. Modifying thenetwork address may include adding, deleting, or modifying networkrouting, naming, or address translation records, such as DNS records. Insome implementations, the IP address of the suspended instance may bemarked as decommissioned, or may be deleted from one or more routing orIP address management tables or systems.

Resources utilized by the instance may be automatically reclaimed at730. Reclaiming resources may include deleting instance data from datastorage systems, removing records associated with the data from one ormore databases, updating records in the classification based automatedinstance management data, or in an external system, such as an inventorytracking system, to indicate that the resources are available orunassigned.

A decommissioned instance notification may be generated and sent at 740.The decommissioned instance notification may indicate that the instancehas been automatically decommissioned. Target recipients for thenotification may be identified based on the classification basedautomated instance management data. For example, the notification may besent to the owner, the approvers, the assignment group, or a combinationthereof, as indicated by the classification based automated instancemanagement data.

All or a portion of implementations of the invention described hereincan be implemented using a general purpose computer/processor with acomputer program that, when executed, carries out any of the respectivetechniques, algorithms and/or instructions described herein. Inaddition, or alternatively, for example, a special purposecomputer/processor can be utilized which can contain specializedhardware for carrying out any of the techniques, algorithms, orinstructions described herein.

The implementations of computing devices as described herein (and thealgorithms, methods, instructions, etc., stored thereon and/or executedthereby) can be realized in hardware, software, or any combinationthereof. The hardware can include, for example, computers, intellectualproperty (IP) cores, application-specific integrated circuits (ASICs),programmable logic arrays, optical processors, programmable logiccontrollers, microcode, microcontrollers, servers, microprocessors,digital signal processors or any other suitable circuit. In the claims,the term “processor” should be understood as encompassing any of theforegoing hardware, either singly or in combination.

For example, one or more computing devices can include an ASIC orprogrammable logic array such as a field-programmable gate array (FPGA)configured as a special-purpose processor to perform one or more of theoperations or operations described or claimed herein. An example FPGAcan include a collection of logic blocks and random access memory (RAM)blocks that can be individually configured and/or configurablyinterconnected in order to cause the FPGA to perform certain functions.Certain FPGA's may contain other general or special purpose blocks aswell. An example FPGA can be programmed based on a hardware definitionlanguage (HDL) design, such as VHSIC Hardware Description Language orVerilog.

The implementations herein may be described in terms of functional blockcomponents and various processing operations. Such functional blocks maybe realized by any number of hardware and/or software components thatperform the specified functions. For example, the describedimplementations may employ various integrated circuit components, e.g.,memory elements, processing elements, logic elements, look-up tables,and the like, which may carry out a variety of functions under thecontrol of one or more microprocessors or other control devices.Similarly, where the elements of the described implementations areimplemented using software programming or software elements theinvention may be implemented with any programming or scripting languagesuch as C, C++, Java, assembler, or the like, with the variousalgorithms being implemented with any combination of data structures,objects, processes, routines or other programming elements. Functionalimplementations may be implemented in algorithms that execute on one ormore processors. Furthermore, the implementations of the invention couldemploy any number of conventional techniques for electronicsconfiguration, signal processing and/or control, data processing and thelike. The words “mechanism” and “element” are used broadly and are notlimited to mechanical or physical embodiments, but can include softwareroutines in conjunction with processors, etc.

Implementations or portions of implementations of the above disclosurecan take the form of a computer program product accessible from, forexample, a computer-usable or computer-readable medium. Acomputer-usable or computer-readable medium can be any device that can,for example, tangibly contain, store, communicate, or transport aprogram or data structure for use by or in connection with anyprocessor. The medium can be, for example, an electronic, magnetic,optical, electromagnetic, or a semiconductor device. Other suitablemediums are also available. Such computer-usable or computer-readablemedia can be referred to as non-transitory memory or media, and mayinclude RAM or other volatile memory or storage devices that may changeover time. A memory of an apparatus described herein, unless otherwisespecified, does not have to be physically contained by the apparatus,but is one that can be accessed remotely by the apparatus, and does nothave to be contiguous with other memory that might be physicallycontained by the apparatus.

Any of the individual or combined functions described herein as beingperformed as examples of the invention may be implemented using machinereadable instructions in the form of code for operation of any or anycombination of the aforementioned computational hardware. Computationalcode may be implemented in the form of one or more modules by whichindividual or combined functions can be performed as a computationaltool, the input and output data of each module being passed to/from oneor more further module during operation of the methods and systemsdescribed herein.

The word “example” is used herein to mean serving as an example,instance, or illustration. Any implementation or design described hereinas “example” is not necessarily to be construed as preferred oradvantageous over other implementations or designs. Rather, use of theword “example” is intended to present concepts in a concrete fashion. Asused in this application, the term “or” is intended to mean an inclusive“or” rather than an exclusive “or”. That is, unless specified otherwise,or clear from context, “X includes A or B” is intended to mean any ofthe natural inclusive permutations. In other words, if X includes A; Xincludes B; or X includes both A and B, then “X includes A or B” issatisfied under any of the foregoing instances. In addition, thearticles “a” and “an” as used in this application and the appendedclaims should generally be construed to mean “one or more” unlessspecified otherwise or clear from context to be directed to a singularform. Moreover, use of the term “an implementation” or “oneimplementation” throughout is not intended to mean the same embodiment,aspect, or implementation unless described as such.

The particular implementations shown and described herein areillustrative examples of the invention and are not intended to otherwiselimit the scope of the invention in any way. For the sake of brevity,conventional electronics, control systems, software development andother functional implementations of the systems (and components of theindividual operating components of the systems) may not be described indetail. Furthermore, the connecting lines, or connectors shown in thevarious figures presented are intended to represent example functionalrelationships and/or physical or logical couplings between the variouselements. Many alternative or additional functional relationships,physical connections or logical connections may be present in apractical device. Moreover, no item or component is essential to thepractice of the invention unless the element is specifically describedas “essential” or “critical”.

The use of “including,” “comprising,” or “having” and variations thereofherein is meant to encompass the items listed thereafter and equivalentsthereof as well as additional items. Unless specified or limitedotherwise, the terms “mounted,” “connected,” “supported,” and “coupled”and variations thereof are used broadly and encompass both direct andindirect mountings, connections, supports, and couplings. Further,“connected” and “coupled” are not restricted to physical or mechanicalconnections or couplings.

The use of the terms “a” and “an” and “the” and similar referents in thecontext of describing the invention (especially in the context of thefollowing claims) should be construed to cover both the singular and theplural. Furthermore, recitation of ranges of values herein are merelyintended to serve as a shorthand method of referring individually toeach separate value falling within the range, unless otherwise indicatedherein, and each separate value is incorporated into the specificationas if it were individually recited herein. Finally, the operations ofall methods described herein are performable in any suitable orderunless otherwise indicated herein or otherwise clearly contradicted bycontext. The use of any and all examples, or example language (e.g.,“such as”) provided herein, is intended merely to better illuminate theinvention and does not pose a limitation on the scope of the inventionunless otherwise claimed.

All references, including publications, patent applications, andpatents, cited herein are hereby incorporated by reference to the sameextent as if each reference were individually and specifically indicatedas incorporated by reference and were set forth in its entirety herein.

The above-described implementations have been described in order toallow easy understanding of the present invention and do not limit thepresent invention. To the contrary, the invention is intended to covervarious modifications and equivalent arrangements included within thescope of the appended claims, which scope is to be accorded the broadestinterpretation so as to encompass all such modifications and equivalentstructure as is permitted under the law.

What is claimed is:
 1. An apparatus for automatically commissioning anddecommissioning a computer-instantiated application instance comprising:a processor configured to execute instructions stored in a memory to:provide a request at a communication input to commission an applicationinstance; identify the request to commission the application instance,the request indicating a classification metric for the applicationinstance; automatically commission the application instance based on theclassification metric; utilize data received at the communication inputto automatically monitor the application instance based on theclassification metric, wherein automatically monitoring the applicationinstance includes: on a condition that an approved extension for theapplication instance based on the classification metric is identified,extending the application instance based on the classification metric;and on a condition that an approved extension for the applicationinstance based on the classification metric is unidentified, determiningwhether the application instance is in an active state or a suspendedstate; and automatically decommissioning the application instance basedon the classification metric.
 2. The apparatus of claim 1, wherein theclassification metric provides an indicator selected from the groupconsisting of an indicator that indicates: whether the applicationinstance is an internal instance or an external instance, an operationalenvironment for the application instance, and an operational type forthe application instance.
 3. The apparatus of claim 1, wherein: theclassification metric is a first classification metric from a pluralityof classification metrics indicated by the request; the firstclassification metric indicates whether the application instance is aninternal instance or an external instance; a second classificationmetric from the plurality of classification metrics indicates anoperational environment for the application instance; and a thirdclassification metric from the plurality of classification metricsindicates an operational type for the application instance.
 4. Theapparatus of claim 1, wherein the processor is configured to executeinstructions stored in the memory to automatically monitor theapplication instance based on the classification metric by identifyingan instance monitoring policy associated with the application instance.5. The apparatus of claim 4, wherein the processor is configured toexecute instructions stored in the memory to identify the instancemonitoring policy by identifying an instance monitoring policy recordfrom a database based on the classification metric.
 6. The apparatus ofclaim 1, wherein the processor is configured to execute instructionsstored in the memory to automatically monitor the application instancebased on the classification metric by, on a condition that theapplication instance is in an active state, identifying an expirationdate for the application instance based on the classification metric. 7.The apparatus of claim 6, wherein the processor is configured to executeinstructions stored in the memory to automatically monitor theapplication instance based on the classification metric by, on acondition that the expiration date is identified, identifying anexpiration milestone for the application instance based on theclassification metric.
 8. The apparatus of claim 7, wherein theprocessor is configured to execute instructions stored in the memory toautomatically monitor the application instance based on theclassification metric by, on a condition that the expiration milestoneis identified, generating and sending an expiration milestonenotification for the application instance based on the classificationmetric and the identified expiration milestone.
 9. The apparatus ofclaim 7, wherein the processor is configured to execute instructionsstored in the memory to automatically monitor the application instancebased on the classification metric by, on a condition that theexpiration milestone is unidentified, determining whether a duration forthe application instance has expired based on the classification metric.10. The apparatus of claim 9, wherein the processor is configured toexecute instructions stored in the memory to automatically monitor theapplication instance based on the classification metric by, on acondition that the duration for the application instance has expired,suspending the application instance.
 11. The apparatus of claim 10,wherein the processor is configured to execute instructions stored inthe memory to suspend the application instance by: identifying a firstinternet protocol address corresponding to the application instance;identifying a domain name system record indicating the first internetprotocol address; identifying a second internet protocol addresscorresponding to a suspended application instance placeholderapplication; and updating the domain name system record to replace thefirst internet protocol address with the second internet protocoladdress.
 12. The apparatus of claim 6, wherein the processor isconfigured to execute instructions stored in the memory to automaticallymonitor the application instance based on the classification metric by,on a condition that the expiration date is unidentified, generating theexpiration date for the application instance based on the classificationmetric.
 13. The apparatus of claim 12, wherein the processor isconfigured to execute instructions stored in the memory to identify theexpiration date for the application instance based on the classificationmetric by: determining a recency of use for the application instancebased on the classification metric; determining an ongoing instancerecency threshold for the application instance based on theclassification metric determining a defined ongoing instance automaticexpiration period; and on a condition that the recency of use is greaterthan the ongoing instance recency threshold, identifying a sum of acurrent date and the defined ongoing instance automatic expirationperiod as the expiration date.
 14. The apparatus of claim 12, whereinthe processor is configured to execute instructions stored in the memoryto automatically monitor the application instance based on theclassification metric by, on a condition that the recency of use isgreater than the ongoing instance recency threshold, generating andsending an instance expiration notification indicating that the instancewill be suspended after the defined ongoing instance automaticexpiration period.
 15. The apparatus of claim 1, wherein the processoris configured to execute instructions stored in the memory toautomatically monitor the application instance based on theclassification metric by, on a condition that the application instanceis in a suspended state, determining whether a suspension period for theapplication instance has expired based on the classification metric. 16.The apparatus of claim 15, wherein the processor is configured toexecute instructions stored in the memory to automatically monitor theapplication instance based on the classification metric by, on acondition that the suspension period for the application instance hasexpired, determine whether to automatically decommission the applicationinstance based on the classification metric.
 17. A computer-implementedmethod for automatically commissioning and decommissioning anapplication instance comprising: receiving at a communication input of aprocessor a request to commission an application instance on a computer;identifying, by the processor, the request to commission the applicationinstance, the request structured to include a classification metric forthe application instance; automatically commissioning, by the processor,the application instance based on the classification metric;automatically monitoring by the processor, utilizing data received atthe communication input, the application instance running on thecomputer based on the classification metric, wherein automaticallymonitoring the application instance includes: on a condition that anapproved extension for the application instance based on theclassification metric is identified, extending the application instancebased on the classification metric; and on a condition that an approvedextension for the application instance based on the classificationmetric is unidentified, determining whether the application instance isin an active state or a suspended state; and automaticallydecommissioning by the processor the application instance based on theclassification metric.
 18. An apparatus for automatically commissioningand decommissioning an application instance, comprising: a processorconfigured to execute instructions stored in a memory to: identify arequest to commission an application instance, the request indicating aplurality of classification metrics for the application instance,automatically commission the application instance based on the pluralityof classification metrics, and automatically monitor the applicationinstance based on the plurality of classification metrics by:identifying a plurality of instance monitoring policies associated withthe application instance based on the plurality of classificationmetrics; and identifying an approved extension for the applicationinstance based on the plurality of instance monitoring policies, whereinmonitoring the application instance comprises: on a condition that anapproved extension is identified, extending the application instancebased on the plurality of instance monitoring policies; and on acondition that an approved extension is unidentified, determiningwhether the application instance is in an active state or a suspendedstate; and on a condition that the application instance is in asuspended state, determining whether a suspension period for theapplication instance has expired based on the plurality of instancemonitoring policies, and on a condition that the suspension period forthe application instance has expired, decommissioning the applicationinstance based on the plurality of instance monitoring policies.
 19. Theapparatus of claim 18, wherein the processor is configured to executeinstructions stored in the memory to suspend the application instanceby: identifying a first internet protocol address corresponding to theapplication instance; identifying a domain name system record indicatingthe first internet protocol address; identifying a second internetprotocol address corresponding to a suspended application instanceplaceholder application; and updating the domain name system record toreplace the first internet protocol address with the second internetprotocol address.